Who we are

The data controller is the operator of this website and cafe.

What data we handle

• Table orders: placed via the QR code at your table, without your name. We store the items, the table, the time and any notes you add to a dish.
• Payments: card payments are handled by SumUp. We never see or store your card details.
• Guest reviews: the rating, the text and the name you choose to enter.
• Visit statistics: a random identifier that lives only in your browser tab, and page events. It is not linked to you and disappears when you close the tab.
• Staff accounts: name, work email and activity in the staff area, for employees only.

Why we use it

To prepare and serve your order, take payment, show reviews, keep the service running and secure, understand in aggregate how the site is used, and meet legal and accounting obligations. Advertising measurement through Meta happens only if you accept marketing cookies.

Who processes data for us

• HostKey: server hosting in the EU.
• SumUp: card payment processing.
• Meta (Facebook pixel): only after you accept marketing cookies, never on ordering, staff or admin pages.
• Anthropic, OpenAI and Google: generating and translating menu texts. No guest data is sent.
• Cloudflare: DNS and email routing.
• Google (Maps and Google reviews): the map and reviewer photos on our contact and home pages are loaded from Google, which receives your IP address and may set its own cookies.

How long we keep it

• Visit statistics: 13 months.
• Rejected reviews: 90 days.
• Staff activity logs: 2 years.
• Orders and payment records: as long as Belgian accounting law requires.

Your rights

You can ask us for access to your data, to correct it, or to delete it, and you can object to or restrict its use. You can withdraw marketing consent at any time using "Cookie settings" in the page footer.

To exercise these rights, write to Contact.

You can also complain to the Belgian data protection authority: Gegevensbeschermingsautoriteit / Autorité de protection des données (dataprotectionauthority.be).

What is stored in your browser

We do not use advertising cookies without your consent. Your browser stores:

• Your cookie choice (waffelin-marketing-consent), so we do not ask again.
• Your cart (waffelin-cart), so it survives a page reload.
• A random visit counter id for this tab only (sessionStorage), removed when you close the tab.